Multiple shortcuts with different access permissions in SCCM 2012

In my article ‘Multiple shortcuts with different access permissions‘ I explained how it is possible to manage an application with different shortcuts with different access permissions with the Application Virtualization web interface. Now I will explain how this is done with SCCM 2012 R2 with CU2.
The basic information can be found in the document ‘Managing AppV5 with Configuration Manager 2012SP1‘. In short: for each application you will have one appv file, one deployment config xml file and one user deployment config xml file.

For example: for the TEST environment you will have the following files on your SCCM Packages share:

Demo_MoreShortcuts_1.0_ENG.appv

Demo_MoreShortcuts_1.0_ENG_DeploymentConfig.xml

Demo_MoreShortcuts_1.0_ENG_UserConfig – TEST.xml

For example: for the PROD environment you will have the following files on your SCCM Packages share:

Demo_MoreShortcuts_1.0_ENG.appv

Demo_MoreShortcuts_1.0_ENG_DeploymentConfig.xml

Demo_MoreShortcuts_1.0_ENG_UserConfig – PROD.xml

In this article I will describe the steps for the PROD environment.

Create the collection

Create user collection

Enter collection name

Direct rule

Click Next to continue.

Fill in the AD group name. You can use willcards, like %.

Choose the correct group name

Click Next to continue.

Close

The AD group name has been filled in.Click Next to continue.

Click Next to continue.

Click Close to finish User Collection Wizard

Update collection membership

Update collection membership.

Click Yes.

The collection has been updated successfully. The AD group is visible now.

Create the application

Create application.

Select ‘Microsoft Application Virtualization 5’ as type.

Browse to the appv file that you want to use.

And click next.

You see all the files that are used. Please mention the name of the user config xml file. That will be used later on.

Modify software name – by adding the environment to the filename – and version.

Click Next.

And click close when the operation has been completed.

Distribute the content

Distribute content

Click next.

Click Next.

Select distribution point.

Choose the distribution points you want to use.

Click next.

Click Next.

Click close when the content has been distributed.

Create the deployment

Deploy the content to the collection.

Click browse to select the collection.

Select the collection.

Click next.

You see the associated distribution points.Click next.

Purpose is required. It will be a mandatory deployment.

Click Next to continue.

If needed modify the settings.Click Next.

If needed modify the settings.Click Next.

Click Next.

A summary is displayed.Click Next.

Click Close.

Test on the client

Before performing these steps log in with a userid that is member of the group ‘APPL – Demo_PRD’.

After a policy refresh the application is visible in the ‘Software Center’ and will be installed.

After installing the application is visible in the Start Menu.

And the correct environment is show.

In the AppEnforce.log you see what commands are executed to install the application.As the collection is user based, the application is deployed on a per user basis. And thus the user config xml is used.

If you enter the powershell command ‘Get-AppVClientApplication -Name *environment*’ you see the settings as mentioned in the appv file.

Retrieve the properties for the application ‘Demo_MoreShortcuts_1.0_ENG – PROD’.